<%= content_tag(:div, "hi", title: params[:stuff].html_safe) %>

<%= content_tag(:div, "hi", title: sanitize(params[:stuff])) %>
